PK87356; 7.0.0.3: AccessException in Security Domain

Download Description

PK87356 resolves the following problem:

ERROR DESCRIPTION:
Federated User Registries with LDAP User Registry is used in a Security Domain which scope is a node level, get method in:

com.ibm.websphere.wim.ServiceProvider

throws following exception:

[5/21/09 15:15:48:562 EDT] 00000048 exception E
com.ibm.websphere.wim.security.authz.AccessException
CWWIM2008E The principal
'user:defaultWIMFileBasedRealm/uid=test,o=defaultWIMFileBasedRe
alm' is not authorized to perform the operation
'GET PersonAccount' on 'uid=testadmin,dc=ibm,dc=com'

LOCAL FIX:
n/a

PROBLEM SUMMARY

USERS AFFECTED:

All users of IBM WebSphere Application Server

PROBLEM DESCRIPTION:
AccessException is caught when Federated User Registries is used in Security Domain

RECOMMENDATION:
None

Due to a code defect in WebSphere Application Server security, Federated User Registries cannot recognize whether some specific security object is properly constructed under Security Domain context. As a result, some methods of Federated User Registries are not functioning properly.

PROBLEM CONCLUSION:
With this fix, the method in WebSphere Application Server security returns proper information to Federated User Registries.

The fix for this APAR is currently targeted for inclusion in fix pack 7.0.0.7. Please refer to the Recommended Updates page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980